diff options
| author | Kevin L. Mitchell <kevin.mitchell@rackspace.com> | 2012-10-09 13:23:52 +0100 |
|---|---|---|
| committer | Mark McLoughlin <markmc@redhat.com> | 2012-10-09 21:16:19 +0100 |
| commit | 3fc46892b6ce7f0ab2112f46e903a4d4c2f8e9ae (patch) | |
| tree | e6b2a54d998bcb2adbf724c157dbb0759b105f94 /openstack/common/plugin | |
| parent | 21b69d86fc2aaf2aa0316c0e0b099a91bcf6937a (diff) | |
| download | oslo-3fc46892b6ce7f0ab2112f46e903a4d4c2f8e9ae.tar.gz oslo-3fc46892b6ce7f0ab2112f46e903a4d4c2f8e9ae.tar.xz oslo-3fc46892b6ce7f0ab2112f46e903a4d4c2f8e9ae.zip | |
Add support for finer-grained policy decisions
Implements blueprint fine-grained-policy
Add support to the new policy language for finer-grained policy
decisions: policy checks can, using the "case" construct, return
values other than simply "True".
This means that a policy rule can be written that allows for fine
shades of permissions; for instance, a rule could return the values,
"fulladmin", "projectadmin", or False, and the caller can use these
values to decide whether to allow all modifications, only some
modifications, or no modifications at all.
Change-Id: Id2bbee5c34052692af12e4a028256131ed2747fc
Diffstat (limited to 'openstack/common/plugin')
0 files changed, 0 insertions, 0 deletions